TI-2026-51613 CVE-2026-73501
kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default
Priority HIGH 80
kin-openapi is a Go project for handling OpenAPI files.
getkin
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9
Exploited now
getkin records in CISA KEVNo getkin vulnerabilities are listed in CISA KEV.
Records
14 records
TI-2026-53976 CVE-2026-77354 · GHSA-xhj3-7xw9-vr34
kin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decoding
Priority HIGH 77
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74664 CVE-2026-100353 · GHSA-vrcc-3ch7-hppw
Nil pointer panic in kin-openapi openapi3filter decoding
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74663 CVE-2026-100352 · GHSA-rj39-cv6w-8wv7
YAML NaN and Inf values cause panic in kin-openapi validation
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74661 CVE-2026-97394 · GHSA-p6wj-qrr4-pgh5
kin-openapi nil pointer panic in openapi3filter on array schemas without items
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74657 CVE-2026-100354 · GHSA-g8cf-rcjf-c8cf
Uncontrolled recursion in kin-openapi crashes the process
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-53730 CVE-2026-76905 · GHSA-mmfr-pmjx-hw9w
NULL pointer dereference in getkin kin-openapi
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
TI-2025-21492 CVE-2025-30153 · GHSA-wq9g-9vfc-cfq9
Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74649 CVE-2026-100351 · GHSA-23vg-4cjm-66q5
Authentication bypass in kin-openapi via encoded URL paths
Priority HIGH 68
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74658 CVE-2026-100350 · GHSA-h4r5-mxv5-8mjc
Repeated regexp compilation in kin-openapi deepObject query decoding
Priority MEDIUM 63
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74655 CVE-2026-100347 · GHSA-fh4f-47mf-f2gj
Panic in kin-openapi legacy router from unsupported HTTP method
Priority MEDIUM 63
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-51614 CVE-2026-73502 · GHSA-jpcw-4wr7-c3vq
NULL pointer dereference in getkin kin-openapi
Priority MEDIUM 57
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74803 CVE-2026-100349 · GHSA-74vm-87hj-r66f
Nil pointer panic in kin-openapi response header validation
Priority LOW 36
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74660 CVE-2026-100348 · GHSA-mh7x-f8wq-4jhx
Nil pointer panic in kin-openapi loader on self-referential ref
Priority LOW 30
kin-openapi is a Go project for handling OpenAPI files.